Date: Wed, 16 Oct 2024 17:37:19 -0400
From: Bruce Momjian <bruce@momjian.us>
To: pgsql-general@lists.postgresql.org
Subject: Re: What are best practices wrt passwords?
Message-ID: <ZxAyD07sVAE7gu1j@momjian.us>
References: <87o73kgzkd.fsf@mbork.pl>
 <CAFCRh-8dM4bLGTKcv1v5wC9guhY_b5G=6w-ivHM4UJGwMUyWaA@mail.gmail.com>
 <87frowggzq.fsf@mbork.pl>
 <Zw_qvUHTC98XcGa6@momjian.us>
 <186766.1729097245@sss.pgh.pa.us>
 <B3A1837B-FA96-42A4-A6D4-949E93EB267C@thebuild.com>
 <20241016212715.b5ioj7pwfeoqzkzm@hjp.at>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20241016212715.b5ioj7pwfeoqzkzm@hjp.at>
Archived-At: <https://www.postgresql.org/message-id/ZxAyD07sVAE7gu1j%40momjian.us>
Precedence: bulk

On Wed, Oct 16, 2024 at 11:27:15PM +0200, Peter J. Holzer wrote:
> On 2024-10-16 09:50:41 -0700, Christophe Pettus wrote:
> > > On Oct 16, 2024, at 09:47, Tom Lane <tgl@sss.pgh.pa.us> wrote:
> > > I believe it depends on your platform --- some BSDen are pretty
> > > permissive about this, if memory serves.  On a Linux box it seems
> > > to work for processes owned by yourself even if you're not superuser.
> > 
> > I just tried it on an (admittedly kind of old) Ubuntu system and MacOS
> > 14, and it looks like shows everything owned by everyone, even from a
> > non-sudoer user.
> 
> On Linux, unprivileged users can only see the environment of their own
> processes since a *very* long time ago. Possibly even before Ubuntu even
> existed. So I'm somewhat sceptical about that. Some other Unixes were
> more permissive. I don't know what camp MacOS falls into.

Yes, I thought this was fixed long ago.

-- 
  Bruce Momjian  <bruce@momjian.us>        https://momjian.us
  EDB                                      https://enterprisedb.com

  When a patient asks the doctor, "Am I going to die?", he means 
  "Am I going to die soon?"